pkg-fence

pkg-fence

A command line tool that glance over package dependencies.

Usage

Input source is reading from stdin.

cat package-lock.json | npx pkg-fence <...>

Auto-detect Input Format

• npm
  from package-lock.json or npm-shrinkwrap.json

• deno-info
  from deno info npm:<pkg>

• (otherwise)
  one name per line

Exit Code

• 0 for empty results
• 1 for anything matched

Built-in Presets

• --lodash: pkg naming starts by lodash. or equals to lodash
• --nolyfill: list of names from https://github.com/SukkaW/nolyfill (1.0.34)
• --relief: list of names from https://github.com/es-tooling/module-replacements (2.2.0)
  • --relief-native
  • --relief-micro
  • --relief-preferred

--extra

to specify addition names:

--extra foo,bar
--extra foo    --extra bar

--ignore

to ignore some names:

--ignore foo,bar
--ignore foo    --ignore bar

--invert ^(-v)

invert the search result

Available

NPM

executable only

npx          pkg-fence
bun    x     pkg-fence
pnpm dlx     pkg-fence
yarn dlx     pkg-fence
deno run npm:pkg-fence

JSR

executable, multi ESM exports, Typing

deno run jsr:@imcotton/pkg-fence

Caveat

Does not differentiate between dev or non-dev dependencies.

• use npm ls ... or npm why ... to make further inspection

Results are unordered, possible in duplications.

• use sort, uniq, or grep etc...

License

AGPLv3

Changelog

[0.6.2] - 2024-07-26

Changed

• NPM built via tsc instead of esbuild (#39)

  Which means no longer bundle for the NPM target, this also leaves more clear delta between each releases.

Added

• More NPM exports that aligned with JSR (#39)

  "exports": {
    "./presets": "./dist/presets/index.js",
    "./scanner": "./dist/scanner/index.js",
    "./collect": "./dist/collect.js",
    "./main": "./dist/cli/main.js"
  }